Controlled folder access in Windows 11 adds another layer of protection for your documents, photos, and other important files. It helps stop untrusted apps from changing files in protected folders, which can limit damage from ransomware and other malicious software.
The feature is part of Windows Security and does not require a separate download. It can occasionally block a legitimate app from saving a file, so this guide explains how to enable it, add folders, and safely allow a trusted program when needed.
Quick answer: Open Windows Security, select Virus & threat protection, choose Manage ransomware protection, and turn on Controlled folder access.
What Controlled folder access does
Controlled folder access lets trusted apps make changes to files in protected folders while blocking apps that Windows does not trust. If an unfamiliar program tries to modify a protected document or photo, Windows can block the attempt and notify you.
Windows protects common folders such as Documents, Pictures, Videos, Music, and Desktop by default. You can add other folders that contain important files. The feature is designed to reduce ransomware damage, but it is not a guarantee against every attack and does not replace regular backups or software updates. Microsoft’s Windows Security guide explains the protection and recovery options.
For broader protection, keep backups of your important files and learn to recognize suspicious files disguised as ordinary documents.
Before you enable ransomware protection
- Microsoft Defender Antivirus must be active. Controlled folder access requires Defender to be the primary antivirus and its real-time protection to be on.
- Save your work. After you enable the feature, an app that is not trusted may be prevented from saving changes to a protected folder.
- Keep a backup. Use an external drive or a trusted cloud backup. Controlled folder access helps prevent unauthorized changes; it cannot restore files that are already lost.
How to enable Controlled folder access in Windows 11
- Open the Start menu, type Windows Security, and open the app.
- Select Virus & threat protection from the left side or the main security dashboard.
- Scroll to the Ransomware protection section.
- Select Manage ransomware protection.
- Find Controlled folder access and switch it On.
If Windows asks for administrator approval, review the prompt and approve it only if you are authorized to manage the PC. The wording or placement of the controls may vary slightly between Windows updates and managed work or school devices.
Add another folder to the protected list
If you keep important files outside the standard Windows folders, you can add their location to the protection list.
- Return to Windows Security > Virus & threat protection > Manage ransomware protection.
- Under Controlled folder access, select Protected folders.
- Choose the option to add a protected folder, then browse to the folder you want to protect.
- Confirm the selection. The folder and its subfolders will be protected.
Choose folders that contain files you care about, such as project documents or personal photos. Avoid adding locations that are used heavily by applications unless you understand how the extra protection may affect those apps.
Allow a trusted app that Windows blocked
Some legitimate apps may need to write to Documents, Pictures, or another protected location. If Controlled folder access blocks one, Windows may show an “App is blocked” notification.
- Read the notification and note the name and location of the blocked program.
- Open Windows Security > Virus & threat protection > Manage ransomware protection.
- Select Allow an app through Controlled folder access.
- Choose Add an allowed app, then browse to the program’s executable file.
- Select the verified app and confirm. Restart the app if it was already running.
Only allow software you recognize and trust. Check that the file is in the expected installation folder and came from the developer’s official source. Do not allow an unfamiliar executable just because it claims to be a driver, update, or document viewer. Microsoft’s Controlled folder access documentation explains how trusted apps and protected folders work.
Fix common Controlled folder access problems
The setting is missing or greyed out
Check whether Microsoft Defender Antivirus is the active primary antivirus and whether real-time protection is enabled. If another antivirus product is managing protection, Controlled folder access may not be available. On a work or school computer, an administrator may also control the setting through policy.
A trusted app still cannot save files
Confirm that you allowed the correct executable, not a similarly named file in a Downloads or temporary folder. Restart the app after adding it. If the app does not need access to a protected folder, saving to another location may be a safer temporary workaround than disabling protection.
You are not sure whether a block was legitimate
Do not automatically allow the app. Verify its publisher and installation path first. If you cannot confirm that it is legitimate, leave it blocked and contact the software developer or your organization’s IT support.
Frequently asked questions
Does Controlled folder access stop all ransomware?
No. It helps block untrusted apps from changing files in protected folders, but it is only one security layer. Keep Windows updated, use reputable security software, and maintain backups that ransomware cannot easily reach.
Is Controlled folder access available in Windows 11 Home?
It is a Microsoft Defender Antivirus feature available on Windows editions that include Defender, including Windows 11 Home. It requires Defender to be active and real-time protection to be on.
Can I protect a folder that is not in Documents or Pictures?
Yes. Open the Protected folders list in the ransomware protection settings and add the folder you want to safeguard.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
Should I turn the feature off if it blocks an app?
Usually, keep it on and allow only the verified app that needs access. Turning the feature off removes this layer of protection for your protected folders.
Once Controlled folder access is enabled, review its notifications when an app is blocked and allow only software you can verify. Combined with reliable backups and careful handling of downloads, it can help reduce the risk of losing important files.
